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. Abstract 

<N 

f-^ | We examine two quantum operations, the Permutation Test and the Circle Test, which test the 

• identity of n quantum states. These operations naturally extend the well-studied Swap Test on 

\ two quantum states. We first show the optimality of the Permutation Test for any input size n 

as well as the optimality of the Circle Test for three input states. In particular, when n = 3, we 
present a semi-classical protocol, incorporated with the Swap Test, which approximates the Circle 
Test efficiently. Furthermore, we show that, with help of classical preprocessing, a single use of the 
Circle Test can approximate the Permutation Test efficiently for an arbitrary input size n. 

1 Introduction 

ctf ; 

When we manipulate quantum information, one of the fundamental operations is to compare two or 
more pieces of quantum information. In particular, we wish to test whether two quantum states are 
identical or nearly orthogonal to each other. A standard quantum operation to test the identity of two 
quantum states is the (Controlled) Swap Test, which "conditionally" swaps the two quantum states 
r*** ! and obtains an answer by measuring its controlled qubit. The Swap Test finds a direct application 
to, for instance, the fingerprinting protocol of Buhrman, Cleve, Watrous, and de Wolf [7j. They 
■ considered the following three-party communication game (known as simultaneous message passing 
', model in communication complexity [E]). Two parties, Alice and Bob, hold m-bit inputs x and y, 
respectively, and Referee wishes to calculate a desired value f(x,y) correctly with high probability, 



OO 
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based solely on the messages received from Alice and Bob, who are prohibited to communicate with 
each other. 

For instance, the equality function EQ {i.e., EQ(x,y) = 1 if x = y and otherwise) requires, by 
^ a quantum operation of Buhrman et al. [7J, Alice and Bob to send quantum information of O(logm) 
qubits to Referee, who applies the Swap Test over the received quantum states to test whether x = y 
(and thus computes EQ(x, y)). In stark comparison, Alice and Bob should send f2(-y/m) bits of classical 
information to Referee [17\ H] (this bound turns out to be tight [2]) to compute the equality function. 
The usefulness of the Swap Test in the above protocol of Buhrman et al. stems from the fact that two 
quantum states received from Alice and Bob are either identical (when x = y) or nearly orthogonal 
(when x / y). 

Besides [7J, the Swap Test has been a key player in various fingerprinting protocols in, e.g., O [6j 
[HI [El [20] . Moreover, the Swap Test has been used in various physical and computational settings, 
which include stabilization of quantum computation [5], quantum estimation [9], quantum Merlin- 
Arthur games |15| . and black-box group problems [10]. Nevertheless, the Swap Test handles only two 
quantum states. How can we test the identity of more than two quantum states? 

This paper examines two natural generalizations of the Swap Test, referred to as the Permutation 
Test and the Circle Test, which turn out to be useful tools in testing the identity of three or more 
quantum states. Instead of swapping two states in the Swap Test, the Permutation Test "conditionally" 
permutes n input states by applying, in superposition, all possible permutations over n elements. 



*Supported in part by Scientific Research Grant, Ministry of Japan, 19700011. 

' Supported in part by grants from the Mazda Foundation and from the Grant-in- Aid for Scientific Research of Japan. 



1 



The Circle Test is a simpler form of the Permutation Test using only multiple applications of a 
single permutation. (For their formal definitions, see Section [2J) In a slightly different context, the 
Permutation Test can be used to amplify the success probability of the aforementioned quantum 
protocol for EQ [7J. In this paper, our focal point is the following problem of testing the identity 
of n quantum states in a state space TL, provided that these states are either identical or mutually 
orthogonal, for simplicity of our argument. 

Quantum State Identity Problem (QSI n ) 
Input: n quantum states (\ipi), ■ ■ ■ > IVv)) in a state space TC. 
Promise: Any pair of the n quantum states is equal or orthogonal. 
Output: YES if all n states are identical; NO otherwise. 

Over two input states, the Swap Test can solve the above identity problem QSI 2 by outputting 
"EQUAL" on any "YES" instance with certainty {completeness error probability 0) and outputting 
"NOT EQUAL" on any "NO" instance with probability exactly 1/2 [soundness error probability 1/2). 
Under the so-called one-sided error requirement, in which the completeness error probability should 
be 0, the Swap Test is known to be an optimal quantum operation for the identity problem QSI 2 . This 
fact was implicitly proven in 2001 by Kobayashi, Matsumoto, and Yamakami [H] (see also [6]). In 
Section 2, we show the optimality of the Circle Test as well as the Permutation Test under the same 
one-sided error requirement; more precisely, the Circle Test is an optimal operation for the problem 
QSI3, and the Permutation Test is optimal for QSI n for an arbitrary input size n > 2. 

Subsequently, we present efficient approximations of the Circle Test and the Permutation Test 
using "semi-classical" protocols involving the Swap Test and the Circle Test, respectively. As a direct 
consequence, these approximations help us build a concise quantum circuit that solves the problem 
QSI n efficiently, because a quantum circuit that implements the Swap Test (resp. the Circle Test) is 
significantly more concise than any quantum circuit for the Circle Test (resp. the Permutation Test). 
In Section 3, we show how a certain sequential application of the Swap Test efficiently approximates the 
Circle Test for QSI 3 . Such an operation gives an optimal approximation procedure. In Section 4, we 
show that, with help of classical preprocessing, a single application of the Circle Test can approximate 
the Permutation Test for QSI n with efficiency, which is one-sided error and has optimal soundness 
error probability up to a multiplicative factor of smaller than 2. We conclude in Section [5] with an 
extension of our results and also a suggestion of future directions. 

2 The Permutation Test and the Circle Test 

Besides the well-studied Swap Test, we introduce two useful tests, called the Permutation Test and the 
Circle Test, which intend to solve our quantum state identity problem QSI„ on n input states taken 
from a state space TC. We begin with the formal definition of the Permutation Test on n quantum 
states (\ipi), ^2)) ■ • • ; |^n)) £ Ti-^ n - For our notational convenience, let a = {do, o~i, . . . , cr„!_i} denote 
the set of all n! permutations over the integer set [n] := {1,2, ...,n}; namely, for each i £ [n], <r, 
denotes the i-th element of the symmetric group S n (in a certain fixed order). Notice that the Swap 
Test is in fact the Permutation Test on two quantum states. 

Permutation Test 

Input: n quantum states (|V'i) 5 \ip2), ■ ■ ■ , |VVi)) in a state space H. 

1. Start with the quantum state |0) (g> \ifji) (g> • • • <S> \ip n ), where |0) (often called the first register) 
denotes the ground state in the n [-dimensional state space. 

2. Apply the quantum Fourier transform F n \ over n! elements to the first register. 

3. Apply a controlled-er operation; that is, if the first register contains index i £ {0, 1, . . . , n\ — 1}, 
transform |V>i) ® • • • ® \ip n ) to IVv^i)) ® • • • ® iVv^n))- 
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4. Apply the inverse quantum Fourier transform (F n \) 1 to the first register. 

5. Measure the first register in the computational basis. If is observed, output EQUAL; otherwise, 
output NOT EQUAL. 

The Circle Test is a simple form of the Permutation Test, defined by multiple applications of a 
single permutation, denoted a c , where a c is the permutation on [n] of the following form: a c (n) = 1 
and o~ c (i) = i + 1 for any index i € [n — 1]. The notation o~l(i) means the result of the j applications 
of a c to i. 

Our motivation of introducing the Circle Test is to provide a tool in building a "concise" quantum 
circuit that solves QSI n efficiently. Consider a quantum circuit that implements the Permutation Test 
for the problem QSI n . Since the Permutation Test involves the quantum Fourier transform F n \ over 
n! elements, a straightforward decomposition of such a transform gives a large-size quantum circuit 
for QSI n . It is therefore better to use a simpler quantum test (than the Permutation Test) to solve 
the problem QSI n with efficiency. 

Circle Test 

Input: n quantum states \1fi2}, ■ ■ ■ , \ipn)) m a state space 7i. 

1. Start with the quantum state |0) (g) <8> ■ ■ ■ <8> \ip n ) where |0) (often called the first register) 
denotes the ground state in the n-dimensional state space. 

2. Apply the quantum Fourier transform F n to the first register. 

3. Apply a controlled-<7 c operation; namely, when the first register contains i E {0, 1, . . . ,n — 1}, 
transform ® ■ ■ • <g> \ip n ) to <8> • • • ® IVv^n))- 

4. Apply the inverse quantum Fourier transform (F n )~ l to the first register. 

5. Measure the first register in the computational basis. If is observed, output EQUAL; otherwise, 
output NOT EQUAL. 

In particular, when n = 2, the Permutation Test as well as the Circle Test coincide with the Swap 
Test. For later analysis, we show how to calculate the probabilities that our new tests on n input 
states output EQUAL. 

Lemma 2.1 Given n input states (l^i)) ■ ■ ■ 5 IVv*,)) S 7i® n , the probabilities that the Permutation Test 
and the Circle Test output EQUAL are, respectively, 

^ n\— 1 n n— 1 n 

—\ Yl II <V>m|Vv fe (m)> and - II (^l^(m))- W 

fc=0 m=l k=0 m=l 

Proof. We show the lemma only for the Circle Test, because the case of the Permutation Test 
can be similarly proven. Let (l^i), • • • , IVv)) £ H® n be our n input states. The Circle Test outputs 
EQUAL on these input states with probability exactly || J27=o l^o-^i)) " " " IV , CT j(n))l| 2 / n2 ) which can be 
further simplified as 

^ n— In— 1 

^2 E Z)^4(i)i^(i)> • • • <vv»(„)iv^ (n) ) 

i=0 j=0 

j n— In— 1 n -. n— In— 1 o-<T l (n) 

k=0 i=0 m=l k=0 i=0 jn= ( j~ < (l) 

Clearly, the last expression equals ^ X)fc=o llm=i('^™l'^o-' s (m))' as requested. □ 
From Lemma l2.1| we can obtain the following result for the Permutation Test. 
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Proposition 2.2 Let n be any number at least 2. The Permutation Test solves the problem QSI„ 
with completeness error probability and soundness error probability at most 1/n. 

Proof. Consider a direct application of the Permutation Test. Obviously, the Permutation Test 
has completeness error probability due to expression ([T|) of Lemma 12.11 Let us fix an arbitrary NO 
instance (\ipi), . . . ,\tp n }). We now argue that in the worst-case scenario, it suffices to consider the 
case where all indices of our NO instance are divided into two sets I\ and I2 satisfying the following 
"equivalence" conditions: (i) all states whose indices are in I\ (resp. I2) are identical and (ii) any 
state having an index in I\ and any state having an index in I2 are mutually orthogonal. To see that 
this is sufficient, consider the case where all the indices are divided into three (or more) sets, say, Ji, 
I2 and I3. A key observation is that the soundness error probability on the NO instance is at most 
the soundness error probability on the same instance whose indices are divided into two sets, I± and 
I2 U I3. Therefore, we need to consider only two sets I\ and I2. 

Now, assume that we have the aforementioned two sets I\ and I2 with = I and I/2I = n — I 
for a certain number I with 1 < I < n — 1. For any permutation cr&, the value nm=l(^"ilVWm)) 
becomes 1 if and only if setwisely stabilizes I\ and 1%; namely, maps any element with an index 
in 1\ (resp. I2) to another element in I\ (resp. 12)- This property concludes that the soundness error 
probability of the NO instance equals the ratio between the number of all such permutations and the 
total number of permutations in S n . This ratio is clearly l\(n — l)\/n\ < 1/n. □ 

Under the one-sided error requirement, we can show the optimality of the Permutation Test for QSI n ; 
namely, any one-sided error quantum operation for QSI n must have the soundness error probability 
of at least 1/n. Earlier, Kobayashi, Matsumoto, and Yamakami p3] (see also [6]) implicitly proved 
the optimality of the Permutation Test for QSI 2 (equivalently, the Swap Test). 

Proposition 2.3 Let n be any number greater than 1. Any quantum operation to solve QSI n under 
the one-sided error requirement has soundness probability at least 1/n. 

Proof. Our proof generalizes the new optimality proof for the Swap Test of Hotta and Ozawa 
[13] , whose fundamental idea is similar to [3(6]. Let 7i be our state space. Let {E y ,E n } denote any 
optimal binary positive operator-valued measure (POVM) that meets the one-sided error requirement, 
from which we have Ey(\ip)® n ) = \ijj)® n for any state \tp) £ 7i. Let P$ be the projection onto the 
symmetric subspace [5] 



which is the subspace of 'H® 71 that is symmetric under the interchange of states for any pair of 
positions in the tensor product. Here, we claim that Ps satisfies the equation E y P$ = Ps- This claim 
is shown as follows. Notice that the symmetric subspace is also the subspace of 'H® n spanned by all 
states of the form \tp)® n [5|. Using this fact, for any state \<p) G Tl® n , Ps\4>) can be expressed as 
P s \(f>) = Y,a c a\v<x) m ■ The equality E y (\ij))® n ) = \^)® n implies that P s \4>) can be further written as 



It follows from the equality E y Ps = Ps that E y = Ps + Ylv ^v\A u }(A u \, where \ u is nonnegative 
(because E y is positive) and \A U ) lies in the orthogonal complement of the symmetric subspace. 
Therefore, we conclude that E y > Ps- Note that the soundness error probability p e equals 



for a certain NO instance (|^>i), ■ ■ ■ , \ipn))- We want to show that p e > 1/n. Now, let us consider 
a specific NO instance (\ipi), ■ ■ ■ , \ipn}) satisfying that ^2) = • • • = \ip n ) as the worst-case instance. 




mi, m2, • • • j "!« are the indices of elements 
in the computational basis of H 





p e = Tr[^(|^i)---|^)(V'i|---(V'n|)] 
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From the inequality E y > P$, p e is lower-bounded by 

1 n 1 

Pe > tv[p 5 (|^i) • • • \i>n)(H ■ ■ ■ m)] = - { II K^K(i))l 2 = -• 

crg5 n 1=1 

This completes the proof. □ 

Propositions 12.2 1 and 12.31 show the optimality of the Permutation Test for an arbitrary input size n. 
As for the Circle Test, when n = 3, we can show in the following proposition that the Circle Test is 
also optimal under the one-sided error requirement. 

Proposition 2-4 The problem QSI 3 is solved with one-sided error probability by the Circle Test with 
soundness error probability exactly 1/3. 

This proposition follows from a more general statement. For technical reasons, we define the Alter- 
nation Test by replacing S n in the definition of the Permutation Test with the alternating group A n , 
which is the group generated by the even permutations in S n . 

Lemma 2.5 For any number n > 2, the Alternation Test solves the problem QSI ra with completeness 
error probability and soundness error probability at most 1/n. 

Proposition 12.41 follows immediately from this lemma since A% equals the cyclic group C3 , which 
defines the Circle Test over three states. 



Proof of Lemma 12.51 The Alternation Test has completeness error probability since, similar 
to Proposition 12.21 the probability p that the Alternation Test outputs EQUAL on n input states 

(l^l), • • • , \ipn)) is p = ^ Efc=o _1 Tlm=l('>J J m\'tpT k (m)), wh ere n, . . . , r n!/2 denote all the even permuta- 
tions over [n] (in a certain fixed order). Hereafter, let us fix a NO instance • • • , \ipn))- Similar to 
the proof of Proposition 12.21 it suffices to deal with the case where all indices of this NO instance are 
divided into two sets I\ and I2 satisfying: (i) all states having indices in I\ (resp. ^2) are identical and 
(ii) any state with an index in I\ and any state with an index in I2 are mutually orthogonal. Assume 
that I\ and I2 satisfy |ii| = I and I/2I =n — l for a certain number I with 1 < I < n — 1. 

Note that, for any even permutation r^, the value rim=i(V'm|V ; T fc (m)) equals 1 if and only if 
setwisely stabilizes I\ and I2. Thus, the soundness error probability of the NO instance equals the ratio 
between the number L of all even permutations that setwisely stabilize I\ and I2, and the total number 
\A n \. We will show that this ratio L/ \ A n \ is exactly l\{n—l)\/n\, and hence L/\A n \ = l\(n— Z)!/n! < 1/n. 
Since \A n \ = n!/2, it is enough to prove that L = l\(n — l)\/2. To evaluate L, we consider the following 
two cases: (i) I = 1 or I = n — 1 and (ii) 2 < I < n — 2. 

We consider Case (i) when 1 = 1. In this case, any even permutation that setwisely stabilizes I\ 
and I2 must fix a unique element in 1%, and thus it is also an even permutation on I2. This implies 
that L = |j4 n _i|, which is (n — l)!/2, as desired. In Case (ii), any even permutation that setwisely 
stabilizes 1\ and I2 is either (a) the product of an even permutation over I\ and an even permutation 
over I2 or (b) the product of an odd permutation over I\ and an odd permutation over I2. First, we 
consider the Case (a). Let us consider the total number of products of even permutations over I\ and 
even permutations over 12- This number clearly equals (Z!/2)((n — l)\/2) = l\(n — /)!/4, which implies 
that L = ll(n — l)\/2. Case (b) is similar. □ 

Unfortunately, the Circle Test cannot be optimal for certain input sizes n. For instance, if n = 
4, the Circle Test can achieve an optimal soundness error probability of 1/4 for a NO instance 
(IV')) IV*); IV')) IV'" L ))j where is an arbitrary state in TL and {ip- 1 ) denotes a state orthogonal to 
\tp), whereas another NO instance (\ip),\ip ± ),\ip},\'ip ± )) makes the Circle Test produce a soundness 
error probability of 1/2 (which is far greater than 1/4). 

In Section SI we show that the Circle Test for QSI n works asymptotically as good as the Permutation 
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Test, if we incorporate additional classical preprocessing with the Circle Test. 

3 Approximation of the Circle Test by the Swap Test 

We have shown in the previous section that the Permutation Test and the Circle Test are optimal 
quantum operations to solve the identity problem QSI 3 with one-sided error probability. From a 
practical viewpoint, it would be ideal to build an identity test for QSI 3 only with the Swap Test as a 
main quantum ingredient. This is mainly because the Swap Test is much simpler than the other two 
operations, and, more importantly, the Swap Test has been well-studied for its theoretical applications 
as well as its physical implementations (e.g., see [SJ [12j [19]). How can we develop such a test? A 
simple and natural approach is a sequential application of the Swap Test (which we refer to as a Swap 
protocol). More precisely, a Swap protocol "classically" chooses two quantum states for the Swap Test 
(out of three or more states) and applies the Swap Test to them as its only true "quantum" operation. 
In the following theorem, we present a certain Swap protocol for QSI 3 , which asymptotically achieves 
the same soundness error probability as the Circle Test does. 

Theorem 3.1 Let m be any positive number at least 2. There exists a Swap protocol for QSI 3 , which 
achieves the soundness error probability of at most 1/3 + l/4 m_1 by applying the Swap Test m times 
sequentially. 

Proof. Let m > 2 be fixed throughout this proof. Our desired Swap protocol for QSI 3 , referred to 
as SRS (Sequential Random Swap), is given as follows. 

Protocol SRS(m) 

Input: three quantum states (\ipi), \ip2), I ^3)) £ 

1. Randomly choose two of the three states IV'i); I ^2) and IV^)- 

2. Repeat the following two steps m times as long as the protocol does not halt. 

(ii-1) Perform the Swap Test on the chosen two states. If the test outputs NOT EQUAL, 
output NO and halt. 

(ii-2) Choose the leftover state as well as one of the two resulting states at random. 

3. Output YES. 

If three input states are identical, then SRS(m) obviously outputs YES with certainty. Consider 
the case where all the three input states are mutually orthogonal. Hereafter, we deal only with an 
arbitrary NO instance (l^i), \ip2), I ^3)) £ W® 3 . We first analyze the soundness error probability for 
m = 2. In the protocol SRS(2), the first Swap Test at Step (ii-1) outputs NO with probability exactly 
1/2, regardless of which states are chosen at Step (i). Without loss of generality, we assume that 
and ^2) are the chosen states at Step (i). After the first Swap Test outputs EQUAL at Step (ii-1), the 
resulting state is of the form -^(|V'i)l' ( / ; 2) + ^2) l^i)) since and \ip2) are orthogonal. At Step (ii-2), 

we obtain two input states: the pure state ^3) and the mixed state p = \(\ifa) (ij)\\ + I^X^D- These 
input states can be evaluated as EQUAL by the second Swap Test at Step (ii-1) with probability 
exactly \ + ±Tr(p|^ 3 )(V> 3 |) = \. Therefore, we obtain the correct answer NO at Step (ii-1) with 
probability exactly 5 + ^ ■ ^ = 4- This gives the soundness error probability of 1/4, which is smaller 
than 1/3. Since the soundness error probability of SRS(m) decreases as m becomes larger, we conclude 
that SRS(m) has soundness error probability smaller than 1/3. 

The more complex case is that two input states are identical and the rest is orthogonal to them. 
Because of the symmetry of our protocol, we can assume that l^i) = \ip3) and | -02 ) = IV'i")' We nee d 
to consider the following two cases. 

(a) and ^2) (or alternatively \ip2) and | -03 } ) are chosen at Step (i). 
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(b) \tpi) and |V>3) are chosen at Step (i). 



We begin with Case (a). For notational convenience, we use the following abbreviations: |1) := 
IV ; T L }|' ! /'i}|V'i)> l^) := lV'i)lV ; i L )IV ; i) and |3) := |V>i)|V'i)|V ; T L }- It is not important for us to choose, at 
Step (h-2), which of the two resulting states to apply the Swap Test, since if the protocol does not 
halt, after Step (h-1), on, say, the first and the second states, the obtained state is in the form: 
a(\l) + |2)) + /3|3). For simplicity, we assume that the second state is always chosen at Step (h-2). For 
our further analysis, we need the following lemma. For readability, we ignore normalization factors of 
quantum states in the lemma. 

Lemma 3.2 Let k be any number in [m]. Under the condition that the protocol does not halt after 
the (k — l)th Swap Test in Case (a), the (conditional) probability p k that the protocol does not halt 
after the kth Swap Test is pk = 1 — 4fc 6 ) _ 8 . The obtained (non-normalized) state can be represented as 
(a fc +l)|l) + (a fc + l)|2)+o fc |3), where a k = |(4(*- 1 )/2_i) j j/fc is dd, onda fc |l) + (a fc + l)|2) + (a fc + l)|3>, 
where a& = |(4 fc / 2 — 1), if k is even. 

Meanwhile, we postpone the proof of this lemma. Let q k be the (accumulative) probability that the 
protocol does not halt after the kth Swap Test in Case (a). Since q\ = p± and = Pkqk-i f° r any 
k > 2, Lemma 13.21 implies that q\ = 1/2 and q k = ^1 — jr^j Qk-i- These recurrence equations have 

a unique solution q k = | + for any number k > 1. 

Next, let us consider Case (b). Let r k be the (accumulative) probability that the protocol does not 
halt after the kth. Swap Test in Case (b). Under our assumption, Case (b) can be analyzed in the 
same way as Case (a) if we replace k in Case (a) by k + 1, because the first Swap Test makes no effect 
on its subsequent computation. We then obtain that n = 1 and r k = qu-l f° r any number k>2. 

Notice that Case (a) holds with probability 2/3 and Case (b) holds with probability 1/3. Therefore, if 
the given input is a NO instance, where two of the three states are identical and the other is orthogonal 
to them, the protocol SRS(m) outputs YES at Step (hi) with probability (2/3)q m + (l/3)r m = 1/3 + 
l/4 m_1 , as requested. 

Proof of Lemma 13.21 The proof is done by induction on k > 1. Let p k denote the probability that 
the protocol does not halt after kth Swap Test in Case (a). Consider the basis case k = 1. After the 
first Swap Test, since we obtain the state |1) + |2) with probability 1/2, the protocol outputs NO with 
probability exactly 1/2. Hence, we have p\ = 1/2 and a\ = 0. In the case of k = 2, note that the 
Swap Test is applied to the second and third states. The total state including the first register (used 
by the quantum Fourier transform) evolves by the Swap Test as follows: 

(|0) + |1»(|1) + |2» - |0>(|1> + |2» + |1)(|1) + |3» 

~ (|0> + |1»(H) + |2» + (|0)-|1»(H> + |3» 
= | )(2|1) + |2) + |3)) + |1)(|2)-|3>). 

Provided that the protocol does not halt, we obtain the state 2|1) + |2) + |3), which yields 02 = 1. 
The desired probability P2 is thus calculated as 

l2 + (_!)2 

P2 = 1 - 2 2 + 1 2 + 1 2 + 1 2 + (_ 1 )2 = 3 / 4 - 

This yields the lemma for the case k = 2. 

Next, let k be any integer greater than 2. First, we deal with the case where k is odd. Assuming 
that the lemma holds for k, we want to show that the lemma also holds for k + 1. By our induction 
hypothesis, we have the state \ipk) = iflk + 1)|1) + ( a k + 1)|2) + ctfe|3) after the kth Swap Test, where 
a k = |(4^ c ~ 1 )/ 2 — 1). Note that the (k + l)th Swap Test is applied to the second and third states in 
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\4>k)- The Swap Test makes the total state evolve as follows: 



(|0> + |l))((o* + 1)|1> + (a k + 1)|2) + a k \3}) 
^ |0)((o fc + 1)| 1> + (a fc + 1)|2) + o fc |3)) 

+|l)((o fc + l)H) + (o fc + l)|3>+o fc |2» 
^ (|0) + |l))((o* + 1)| 1> + (a fc + 1)|2) + o fe |3)) 

+(|0) - |l))((o* + 1)|1) + o fc |2) + (a k + 1)|3>) 
= |0)((2o fc + 2)|1) + (2a k + 1)|2) + (2a k + 1)|3» + |1)(|2) - |3». 

We then obtain the state (2a^ + 2)|1) + {2a k + 1)|2) + (2a k + 1) 1 3) if the protocol does not halt. From 
this state, it immediately follows that a k+ \ = 2a k + 1. Therefore, p k +i has the value 

l 2 + (-l) 2 

(2a fc + 2) 2 + 2(2a fc + l) 2 + l 2 + (-l) 2 
2 

(a fc+1 + l) 2 + 2a 2 +1 + 2' 

Since a k+ \ = 2a k + 1 = i(4( fc+1 )/ 2 — 1), we finally obtain p k+ \ = 1 — 4 k+i +8 - We thus conclude, from 
the induction hypothesis for k, that the lemma holds for k + 1. A similar analysis verifies that the 
induction step also holds for any even number k. Therefore, the mathematical induction guarantees 
the correctness of the lemma. □ 

This completes the proof of the theorem. □ 

As a direct consequence of Theorem 13. 1\ we conclude that SRS is one of the best choices among all 
Swap protocols solving the problem QSI 3 . 



Pk+i = 1 - 
= 1 - 



4 Approximation of the Permutation Test by the Circle Test 

This section compares the performances of the Circle Test and of the Permutation Test. First, we 
focus our attention on the Circle Test for QSI„, where n is a prime number. For such a number n, we 
can show that the Circle Test has the same performance for QSI n as the Permutation Test does. This 
indicates that the Circle Test is a best quantum test for any "prime" input size n among all one-sided 
error quantum operations for QSI„. 

Proposition J^.l Let n be a prime number. The Circle Test for QSI n achieves the soundness error 
probability of at most 1/n. 

Proof. Let n be any prime number and let (\ipi), . . . , \i^ n )) be any instance of the identity problem 
QSI n . Lemma 12 . 1 1 implies that the Circle Test outputs EQUAL on the instance with the probability 
p = i X]fc=o rim=i(^ml' i / ; ( T fc (m))- ^ (IV'i )>•••> I VVi)) is an YES instance, then it is straightforward to 
show that p = 1. Next, we consider the case where (l^i), • ■ • , \ipn)) is a NO instance. Now, we claim 
the following. 

Lemma Let ( ),..., \ip n )) be any NO instance. For any number k € [n — 1], there exists an 
index m S [n] such that (^mlVv^m)) = 0. 

From this lemma, it follows that the probability p equals - Y[m=l(' l l ; m\'4'cr (m))- Therefore, the 
Circle Test outputs EQUAL on (|^i), . . . , |VVi}) with probability ^ rim=i(' i / , m.|V , <T (m))) which is clearly 
upper-bounded by 1/n. 

To complete the proof of the proposition, we need to prove Lemma 14.21 Let us assume, toward a 
contradiction, that the lemma fails. By the promise of QSI n , there exists a number k G [n — 1] such 
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that, for any number m G [n], \tp m ) = \ipa k (m))- Since (\ipi), ■ ■ ■ , iV'n)) is a NO instance, there exist two 
indices fi and // for which (^IVy ) = 0- This yields the existence of a proper subset / = {/j-i, H2, ■ • •} 
of [n] satisfying that \ip^) = \ip v ) for any pair fj,,u E I, and (ip^\ip u ) = for any fi £ I and v £ [n] \ I. 
Choose m in /. Since \ip m ) = |^ CT fc( m )) for any m £ [n], we obtain = IV^^i)) = l^2 fc (^i)) = ' ' ' • 
Let S = {fj,\, a^(fj,x),a^ k (fj,i), . . .}. It follows from the definition of / that S C /. Since the set S is 
the Z n -orbit with respect to fix, its cardinality is a divisor of n. The "prime" condition of n concludes 
that [n] = S. Since S C /, we have / = [n], which contradicts our assumption that I is a proper 
subset of [n]. This completes the proof of the lemma and thus completes the proof of the proposition. 
□ 

For an arbitrary input size n, how good is the performance of the Circle Test for QSI n , compared 
to the Permutation Test? Under the one-sided error requirement, as seen in Section [2j the Circle 
Test, in general, cannot be optimal for QSI n . Nevertheless, it is possible to give a simple and almost 
optimal protocol, called RCIR (Randomized Circle Test), which uses the Circle Test only once after 
the classical processing of permuting n quantum states randomly. 

Protocol RCIR 

Input: n quantum states (|^>i), \4>2), ■ • • , |VvJ) G Ji® n 

1. Permute the input quantum states by a randomly chosen permutation r G S n . Let (\(f>x), ■ ■ ■ , \ 4>n}), 
where \<j>j) = \ip T rj\), be the resulting quantum states. 

2. Apply the Circle Test to (|0i), . . . , \<p n )). 

We show that the protocol RCIR is an "asymptotically" optimal quantum operation for QSI n up 
to a constant multiplicative factor of nearly 7r 2 /6. 

Theorem 4-3 The protocol RCIR meets the one-sided error requirement and achieves the soundness 
error probability of at most ir 2 /6n + 0(l/n 2 ) < 1.7 jn + 0(l/n 2 ). 

Proof. With the same reasoning given in the proof of Proposition 12.21 it suffices to analyze only 
NO instances (|^i), . . . , \ipn}) whose indices are divided into two sets Ix and I2 such that any two 
states with indices in Ix (also, I2) are identical and any pair of states, one of which has an index in 
Ix and the other has an index in I2, is orthogonal. In what follows, we call a state whose index is in 
Ix (resp. I2) an Ix- state (resp. l2-state). Let Ix and I2 be such sets of indices of the permuted states 
{|0i}, • • • , \(f> n }} obtained at Step (i) of the protocol RCIR. For convenience, let Ix = {fJ,x,fJ>2, ■ ■ ■ , /v} 
with nx < fJ-2 < • • • < Mr and I2 = [n] \ Ix , where r G [n — 1] . Without loss of generality, we 
assume that < I-Z2I; namely, r < n/2. Let us also assume that there are exactly s elements 
kx = 0, &2 5 • • • > k s G {0, 1, . . . , n — 1} such that each number k G {kx, • • • , k s } satisfies (4'm\4'a k (m)} = 1 
for any number m G [n]. Lemma 12.11 concludes that the soundness error probability of the protocol 
equals s/n. The following lemma is easily proven. 

Lemma 4-4 Let K = {kx, ^2, • • • , k s }. 

(i) For any m>\, if k' G K then so is mk' . 

(ii) Ifk',k" G K then so is GCB(k',k"). 

By Lemma 14.44 the set K = {kx, k2, k^, ■ ■ ■ , k s } can be of the form kx = 0, k2 = k, k^ = 2k, . . . ,k s = 
(s — l)k for the divisor k (= n/s) of n. For convenience, we call s and k the repetition number and 
the cycle size, respectively. 

To help the reader, let us see an example. Figure [1] renders a cyclic alignment of all Ii-states with 
parameters n = 12 and r = 6, where the repetition number s is 3 and the cycle size A; is 4. A black node 
(resp. white node) indicates an Ii-state (resp. /2-state). Each cyclic alignment of ii-states induces an 
Ix-pattern, which is a bit string (bx, ■ ■ ■ , bk) defined by hi = 1 if i G Ix and otherwise. In Figured! 
this Ii-pattern is (1, 1, 0, 0). By the definition of cycle size k, such an /i-pattern uniquely characterizes 
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Figure 1: An example of cyclic alignment of all I\ -states with n = 12 and |ii| =6 



a cyclic alignment of ii-states as follows: for any j S {0, 1, . . . , s — 1} and i £ [k], the index jk + i G [n] 
is in Ji if i E Ii, and in I2 if i G ^2- Note that the Hamming weight of (61, . . . , bk), which indicates the 
number of indices in [k] 01%, is exactly |ii|/s = r/s. 

Now, we return to our proof. We wish to show that the soundness error probability for any fixed 
r is at most 7r 2 /6n + 0(l/n 2 ). Let p s be the probability that a cyclic alignment of Ii-states with 
repetition number s is chosen by the protocol RCIR. Note that, as far as GCD(n, r) = 1, s equals 1; 
hence, we have p\ = 1. This implies that the soundness error probability equals 1/n. Since a cyclic 

( k ) ( n/s ) 

alignment of all /i-states is randomly chosen, it follows that, for s > 2, p s < ^? = ^ . Recall that 

any cyclic alignment of /i-states with repetition number s produces the soundness error probability 
of s/n. Therefore, the total soundness error probability is at most 

m/s\ (n/s\ 
1 W*' s / 1 , W«' S fo\ 

Pl 'n + ^ Tyn-n+^W- n (2) 

s: s\n s: s\n 



To upper-bound Eq.([2]) further, we need the following technical lemma. Recall that s is a divisor 
of r. For convenience, let q(n, r, s) 



(n/s\ 
\r/a) 



Lemma A. 5 The value q(n,r,s) is at most if s < r/3; -< — 1W 6 „w — 57 if s = r/2; and , 2 ,s if 

^ 'V ' ' / ns z J — ' 7 (n— l)(n— 2)(n— 3) J ' ' n(n— 1) J 

S = r. 

We continue our argument. Lemma 14.51 helps us upper-bound the right-hand expression in Eq.([2]) 



as 



1 + y: (A) <" 



n \ns 2 

s: s\n 



< 1 + EfAV0(l/n 2 ) = i + ^^ + 0(l/n 2 ) 

s=2 



n ^—i V ns 2 J n n 



The last expression is clearly equal to 7r 2 /6ro + 0(l/ro 2 ), as requested. 

What remains is to prove Lemma [4.51 Consider the first case s = r. In this case, we have q(n, r, s) = 

T"V ' n = 7«y ! wmc ^ * s bounded from above by t^j = w ^ w 2 _ 1 > ) because s > 2. Let us consider the 
second case s = r/2. The expression q(n,r,s) is further calculated as 

(£) n ~ n(n- !)••>- 2s + l) 2 ' W 
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Noting that 2s > 4, 2s = r < n/2 and n — 2s + 1 > n/2 + 1, it follows from Eq.Q that q(n, r, s) is at 
most 

1 • 2 • 3 • 4 • • • 2s n 



n(n-l)(n-2)(n-3)---(n-2s + l) 2s 

1-2-3-4 n 6 



< 



n(n - l)(n - 2)(n - 3) 4 (n - l)(n - 2)(n - 3) 
In the final case s < r/3, the expression q(n,r,s) equals 

(n/s\ (n/s)(n/s— l)---(n/s— r/s+l) 

, . _ U/J S _ (r/s)(r/s-l)-l S 

9tn ' r ' Sj ~~ 7™r'n~ n(n-l)-(n-r+l) ^ 

Vr/ r(r-l)-l 

s .n...(«_r + l) . r ...l 

_ s V s s ) 



n ■ n ■ ■ ■ (n — r + 1) (£ • • • 1) 

which is clearly at most 

s /n/sV /s *•••■(§ + !) 



n \ n J (n — L ) ■ ■ ■ (n — r + 1) 

This expression is further upper-bounded by since 2 < s < r < n/2 implies — < 2/3. From 

our assumption s < r/3, it therefore follows that 

v a (l\ r/s s f\V 1 
q{n,r,s) < - - < 



n \ s 1 n \s J ns 2 



This ends the proof of the lemma and thus the proof of Theorem 14.31 □ 



5 Closing Discussion 

The Swap Test has been widely used in the literature to test the identity of two quantum states. In 
this paper, we have studied two additional tests, the Permutation Test and the Circle Test, which 
generalize the Swap Test. We have analyzed the performances of these two tests for the quantum 
state identity problem, QSI n , under the one-sided error requirement. Throughout this paper, we have 
restricted our attention to the identity problem's promise (in the definition of QSI n ) and also the 
one-sided error requirement. These restrictions make our analysis easier; nevertheless, the restrictions 
can be relaxed. We briefly discuss how our result can be applied to less constrained situations. 

The promise of our identity problem QSI n demands that any pair of quantum states is identical 
or orthogonal. By relaxing the latter orthogonality, we can consider the following weak form of an 
identity problem, denoted QSI^, in which we want to determine either (a) all n quantum states are 
identical or (b) there are two states whose inner product is less than or equal to e, provided that either 
(a) or (b) holds. This problem QSI^ was dealt with in a fingerprinting protocol in [7j. Our results in 
this paper still provide a good proximity of the three tests to the problem QSI^ since QSI n coincides 
with QSI^ when e = 0. 

Our one-sided error requirement requests that the completeness error probability should be 0. This 
requirement naturally occurs in the literature regarding the Swap Test (e.g., El [18]). As a natural 
relaxation of this requirement, when we allow non-zero completeness error probability, we obtain the 
two-sided error requirement. Even with this relaxed requirement, we can claim that the Swap Test 
is "optimal" in the sense that the Swap Test achieves the largest gap between the probabilities that 
EQUAL is outputted on YES instances and on NO instances. This claim can be shown by a trace-norm 
distance argument as follows. 
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Consider the two YES instances (|0),|0)) and (|1),|1)), where each input is a single qubit. For 
simplicity, let us denote them by 1 00) and |11), respectively. Similarly, consider two NO instances \-\ — ) 
and | -+), where |+) = (|0) + \l))/y/2 and |-) = (|0) - |l))/\/2. Now, let p y = £(|00)(00| + |11)(11|) 
and p n = |(| H — )(-| — | + | — h)( — h |). Write p c and p s for the completeness and soundness error 
probabilities, respectively, of the test. There is a POVM M such that the Zi-norm gap GAP between 
two probability distributions obtained by M on p y and p n is at least |(1 — p c ) — p s \ + |(1 — p s ) — p c \ = 
2 — 2p c — 2p s . On the contrary, since the trace-norm distance between p y and p n is 1/2, the value 
GAP should be at most 1 [1] (see also [IS]). This yields the inequality p c +Ps > 1/2. Notice that 
the Swap Test achieves the equality p c + p s = 1/2. Therefore, the Swap Test is optimal even in the 
two-sided error requirement. 

With a similar argument for the Circle Test for QSI 3 , we can prove that the Circle Test is also 
"optimal" with two-sided error probability. On the contrary, the optimality of the Permutation Test 
under the two-sided error requirement is currently open. We expect the optimality of the Permutation 
Test; however, it is likely that the trace-norm distance argument for the Permutation Test is insufficient 
to prove the optimality under the two-sided error requirement. 

Another interesting open question in line of our work is to seek an efficient approximation of the 
Permutation Test for QSI n by use of a certain Swap protocol that runs the Swap Test 0(n) times. Such 
a Swap protocol provides an ideal construction of a quantum circuit that implements the Permutation 
Test since it is much more concise than the direct construction of the Permutation Test based on the 
decomposition of the Fourier transform F n \ over n\ elements. 

Acknowledgments: We are grateful to Masahiro Hotta and Masanao Ozawa for sending us their 
unpublished manuscript that became a basis of our proof of Proposition 12.31 
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